Research · Jan 31, 2024
Critical SSRF Vulnerability Discovered in Ivanti Products
A significant server-side request forgery (SSRF) vulnerability has been identified in Ivanti Connect Secure, Policy Secure, and Neurons, potentially exposing sensitive resources to unauthorized access.
What changed
A newly discovered server-side request forgery (SSRF) vulnerability affects several Ivanti products, including Ivanti Connect Secure, Policy Secure, and Neurons. This flaw is present in the SAML component, allowing attackers to access restricted resources without proper authentication.
Who is affected
The vulnerability impacts various Ivanti products, which are widely used in enterprise environments. Organizations utilizing these products should be aware of the potential risks associated with this SSRF vulnerability.
- Ivanti Connect Secure (ICS), formerly known as Pulse Connect Secure
- Ivanti Policy Secure
- Ivanti Neurons
What to do
Organizations using the affected Ivanti products should prioritize assessing their systems for this vulnerability. It is crucial to implement necessary security measures to mitigate potential risks.
- Review and update Ivanti products to the latest versions.
- Conduct a security audit to identify any unauthorized access.
- Implement additional access controls to protect sensitive resources.